CREATE YOUR OWN WORDLIST WITH CRUNCH

CRUNCH INTRO:-

While cracking the password, attacker always needs an wordlist. Normally, wordlist use thousand of words per second to crack the password. If attacker gathers some information about the victim like – birthday dates, children names, pets name, girlfriend name etc. Attacker can use information in creating of the custom wordlist.

While attacking on any organisation we might need an custom wordlist, to generate the wordlist for attacking. Thats why crunch is used. Crunch is an inbuilt tool from Kali Linux. Crunch helps in creating an custom wordlist. And that wordlist can be used in John The Ripper, Cain And Abel, Aircrack-ng and many more password cracking tools.

Ethical hacking researcher of iicybersecurity says that crunch is mostly used in mass level of attacking on login webpages of popular social media platforms as well as on big tech companies.

Basic Command of Crunch:-

crunch <mini. password length> <max. password length>

You can also specifiy the numbers or the characters in wordlist. If you specify the character the wordlist will generate in characters and if you specify the numbers the wordlist will generate in numbers as shown below.

Here wordlist will be generated in characters.

Type crunch 2 4 abcdefgh

2 is the minimum password length and 4 is the maximum password length.

abcdefgh characters are used to generate the list.

You can also use the numbers to generate the wordlist.

Here wordlist will be generated in numbers.

Type crunch 2 4 123456789

2 is the minimum password length and 4 is the maximum password length.

123456789 numbers are used to generate the list.

START WITH CRUNCH TO SEE MORE OPTIONS:-

Type crunch

Type man crunch

====================SNIP===================

==================SNIP=================

The above screen shots are the manual pages of the crunch. These manual pages can be used in knowing the options of crunch command.

CREATING AN SIMPLE WORDLIST:-

We are assuming that the target having password between 2 and the 4 characters. So the crunch will make wordlist between 2 to 4 character.

Type crunch 2 4 in linux terminal.

2 is the minimum password length and 4 is the maximum password length.

As you can see that the crunch has started to make the wordlist. Notice one thing that wordlist has been created between 2 to 4 characters.

You can use the above wordlist for cracking the password.

CREATING THE WORDLIST WITH NUMBERS:-

Type crunch 10 10 9875347821 -o /root/numericlist.txt

9875347821 are the numbers used to generate the list.

10 is the minimum password length and next 10 is the maximum password length in the above command.

-o /path/to/save/list is used to specify the location to save the wordlist.

The above numeric list could be used if the attacker knows the mobile number of the target. It could be an possibility that password must be an mobile number.

CREATING THE WORDLIST WITH OTHER OPTIONS

USING -i OPTION:-

-i is used to inverts the output. This options inverts the output generated without -i option. If we don’t use -i, crunch will generate list in aa, ab, ac, ad, ae but if you use -i, crunch will generate list in aa, ba, ca, da, ea as shown below.

Type crunch 1 2 abcdefgh -i -o /root/wordlist2/txt

abcdefgh are the characters used in generating list.

1 is the minimum password length and 2 is the maximum password length in the above command.

-o/path/to/save/list is used to specify the location to save the wordlist.

USING THE CHARSET:-

Crunch provides a feature where you can generate a list using a specific character set. If you know that your target is using the password of 7 alphanumeric characters. You can generate a list of the possibilities in crunch.